Static task
static1
Behavioral task
behavioral1
Sample
77d3a9d4a3a0afc3a909cc73098eae60_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
77d3a9d4a3a0afc3a909cc73098eae60_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
77d3a9d4a3a0afc3a909cc73098eae60_JaffaCakes118
-
Size
814KB
-
MD5
77d3a9d4a3a0afc3a909cc73098eae60
-
SHA1
0e200a3cdf5a18f8e0c0cc17b7c2b2e721d5a7d3
-
SHA256
38b9316bac0ce6e3d500be8d87b2ecc7a5e9680d64adca6d7b52192a294c5361
-
SHA512
dff71b80800a1067056aa6f9f1ba4c1602eb672e1c8db522f8010cae67cb3df307b5a46d5d1c3f625e7508657e6fbb44328121aefd9bc2e4419088e50b8ebc36
-
SSDEEP
24576:82UeK72U1GOO1lDVBqBXymSEtUJG2vLkzS+KSaB:gqYrUZVB3cUJtozSXSaB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 77d3a9d4a3a0afc3a909cc73098eae60_JaffaCakes118
Files
-
77d3a9d4a3a0afc3a909cc73098eae60_JaffaCakes118.exe windows:5 windows x86 arch:x86
2e31e3c31e0a68a279020e42d631be06
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLastError
InterlockedExchange
GetProcAddress
LeaveCriticalSection
TlsGetValue
FreeLibrary
FlushFileBuffers
GetFullPathNameA
VirtualProtect
InitializeCriticalSection
DeleteCriticalSection
GetThreadLocale
EnterCriticalSection
ExitProcess
MultiByteToWideChar
GetSystemTimeAsFileTime
WriteFile
SetFilePointer
GetTempPathA
HeapAlloc
GlobalAlloc
HeapCreate
WideCharToMultiByte
LoadLibraryA
IsDBCSLeadByteEx
GetModuleHandleA
GetFileSize
SetUnhandledExceptionFilter
VirtualQuery
Sleep
user32
CharLowerBuffA
secur32
QuerySecurityPackageInfoA
wldap32
ord46
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.xyue Size: 763KB - Virtual size: 763KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 15KB - Virtual size: 693KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ